SecurityWeek

Fourth SharePoint Vulnerability Exploited in Past Month’s Wave of Attacks

The in-the-wild exploitation of four Microsoft SharePoint vulnerabilities has come to light in the past month.

CISA orders urgent action on actively exploited Langflow RCE flaw

The Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday ordered U.S. government agencies to prioritize ...
The Hacker News

Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC

Towr reports active exploitation of SharePoint CVE-2026-50522 after a public PoC, with attackers stealing machine keys for ...
SecurityWeek

Exploitation of ServiceNow Vulnerability Seen Days After Disclosure

A ServiceNow remote code execution vulnerability tracked as CVE-2026-6875 is reportedly being exploited in the wild.
Tech Times on MSN

NGINX map regex RCE gets public scanner: Patch now, full exploit due August

CVE-2026-42533 NGINX vulnerability now has a public config scanner as researcher Stan Shaw warns the critical heap buffer ...

WordPress Core "wp2shell" RCE flaws get public exploits, patch now

Public exploits have been released for the critical "wp2shell" remote code execution vulnerabilities affecting WordPress Core ...
Security Boulevard

WordPress Critical RCE Security Flaw a Threat to Millions of Websites

Administrators are being urged to patch a critical pre-authentication RCE vulnerability in WordPress that threatens millions of websites and which can lead to a full takeover by attackers.
MarketWatch

Element Security Discovers Critical RCE Vulnerability in Check Point Security Gateways

The MarketWatch News Department was not involved in the creation of this content. Element Security, a leader in Continuous Threat Exposure Management (CTEM), has uncovered a critical Remote Code ...
Infosecurity-magazine.com

RCE Vulnerability Found in RomethemeKit For Elementor Plugin

A severe security flaw in the popular RomethemeKit For Elementor WordPress plugin has been identified and patched. The issue, which could allow Remote Code Execution (RCE), has been fixed in version 1 ...